2021-10-07 02:16:01 -04:00
|
|
|
|
### Are links vulnerable to MITM attack?
|
|
|
|
|
|
|
|
|
|
`Scan FQDN using API`
|
|
|
|
|
|
2022-09-07 21:12:23 -04:00
|
|
|
|
![](../../image/ismmpreview.jpg)
|
2021-10-07 02:16:01 -04:00
|
|
|
|
|
2023-02-23 22:04:23 -05:00
|
|
|
|
![](../../image/ismm_sample.jpg)
|
2021-10-07 02:16:01 -04:00
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
You′ve found something on the internet.
|
|
|
|
|
Are these links or images vulnerable to MITM attack or not?
|
2023-02-23 22:08:06 -05:00
|
|
|
|
(Cloudflare links will be marked)
|
2021-10-07 02:16:01 -04:00
|
|
|
|
|
2023-02-25 00:18:06 -05:00
|
|
|
|
This add-on is using[1] public[4] API to scan[3] the domain.
|
2021-11-05 05:34:23 -04:00
|
|
|
|
WE DO NOT COLLECT THIS DATA.
|
2023-02-23 21:30:01 -05:00
|
|
|
|
e.g. https://www.ekzemplo.com/page.html → "ekzemplo.com"
|
2021-10-07 02:16:01 -04:00
|
|
|
|
|
|
|
|
|
This add-on never send other information.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[1] How to use offline database
|
|
|
|
|
1. Open add-on's option page and select "Use Offline Local Database".
|
|
|
|
|
2. Click "Database" link.
|
2021-10-16 20:18:39 -04:00
|
|
|
|
3. Create a new text file[2] (or download text file from git)
|
2021-10-07 02:16:01 -04:00
|
|
|
|
4. Click "Import Database" and select your text file.
|
|
|
|
|
5. Wait until the message appear.
|
|
|
|
|
|
|
|
|
|
[2] Text file example
|
|
|
|
|
(FQDN/Domain)
|
|
|
|
|
--------------------
|
2023-02-23 21:30:01 -05:00
|
|
|
|
cloudflare.com
|
2021-10-07 02:16:01 -04:00
|
|
|
|
domain.com
|
|
|
|
|
example.org
|
|
|
|
|
--------------------
|
|
|
|
|
|
|
|
|
|
[3] "Observe and Learn" mode
|
|
|
|
|
If you don't want to use online public API, or don't want to maintain offline database
|
|
|
|
|
this option is for you.
|
|
|
|
|
You'll have to visit cloudflared website first because this add-on never make a
|
|
|
|
|
request to websites.
|
|
|
|
|
To activate this option, go to "Database" section and select "Use offline local database".
|
|
|
|
|
To purge local database, go to "Database" section and click "Database", "Clear all data".
|
|
|
|
|
|
|
|
|
|
[4] Public API services
|
|
|
|
|
You can select which API service you want to use.
|
2021-10-16 20:17:40 -04:00
|
|
|
|
Additionally you can self-host and use your own API.
|
2021-10-07 02:16:01 -04:00
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|
2022-09-07 21:12:23 -04:00
|
|
|
|
- [API Self-host Guide](../../tool/api_for_ismm_isat/)
|
2021-10-07 02:16:01 -04:00
|
|
|
|
- Download add-on
|
2023-04-25 23:56:18 -04:00
|
|
|
|
- From Git: [FirefoxESR](https://0xacab.org/my-privacy-dns/deCloudflare/-/raw/master/addons/releases/ismm.xpi) / [Chromium / Edge](https://0xacab.org/my-privacy-dns/deCloudflare/-/raw/master/addons/releases/ismm.crx)
|